Activate role based multi-factor authentication

  • Release version: Australia
  • Updated March 12, 2026
  • 1 minute to read

    • Use the glide.authenticate.multifactor property to enforce role-based multi-factor authentication (MFA) for all users assigned to specific roles.

    The glide.authenticate.multifactor system property enforces multi-factor authentication based on the roles assigned to the user. If this property is set to true, then it enforces role-based multi-factor authentication for all users described in the Multi-factor Criteria [multi_factor_criteria] table. This table enforces multi-factor authentication based on the roles assigned to the user. If a user has been assigned admin, security_admin or user_admin roles in the multi-factor roles list, MFA is enforced.

    Ensure that the property glide.authenticate.multifactor is set to true and that the Multi-factor Criteria [multi_factor_criteria] table has a Role base multi-factor authentication record with the Active field set to true.

    More information

    Attribute Description
    Configuration name
    • glide.authenticate.multifactor system property
    • Role base multi-factor authentication record on the Multi-factor Criteria [multi_factor_criteria] table
    Configuration type
    • System Properties (/sys_properties_list.do)
    • Multi-factor Criteria (/multi_factor_criteria_list.do)
    Data type
    • Boolean
    • Record configuration
    Recommended value
    • true
    • The Multi-factor Criteria [multi_factor_criteria] table record with sys_id d427668b73003300fdbd04fbc4f6a7b6 should be present, with the Active field selected.
    Default value <none>
    Fallback value
    • false
    • The Multi-factor Criteria [multi_factor_criteria] table record with sys_id d427668b73003300fdbd04fbc4f6a7b6 has the Active field unselected.
    Category Authentication
    Security risk
    • Severity score: 5.7
    • CVSS rating: Medium
    • Security risk details: Enforcing MFA based on roles strengthens authentication security and aligns with best practices for protecting privileged accounts.
    Functional impact Enabling this property improves the experience of the user. It acts as an extra layer of protection and security against compromised credentials.
    Dependencies and prerequisites None